IN THE CLAIMS 

The following is a complete listing of the claims, and replaces all earlier 
versions and listings. 

1. (currently amended): An information processing method of 
controlling access to computer storage, display, recording and other resource|T(s)lls 
managed by an operating system in a computer, the method being implemented by a 
specific resource management program located between the operating system and an 
application, the method comprising: 

a storing step of storing a management table in a storage medium, wherein 
the management table provides, for each computer resource managed by the operating 
system, access right information representing comprising access rights for outputting each 
computer resource to another computer resource , each represented by a series of basic 
operations for accessing computer resources, and conditions under which the access right is 
rights are validated; 

an interception step of intercepting an operation access request for a first 
computer resource from a process, before the operation access request is transferred to the 
operating system , and if ; 

a monitoring step of monitoring all the basic operations for accessing 
computer resources; 

a registration step of, when the process heMs -secures access to the first 
computer resource, registering a correspondence between the process and the first 



computer resource in a storage medium resulting in a registered process and a registered 
computer resource ; 

a cancellation step of, when the process releases the first computer resource, 
cancelling the correspondence between the process and the first computer resource; 
a determination step of: 

retrieving access right information of the first computer resource 
from the management table; 

monitoring examining the monitoring result to see whether there is a 
series of basic operations requests associated with the registered process and the registered 
first computer resource to recognize when the series of operation requests, which, when 
considered together, has the effect of outputting the registered computer resource to a 
second computer resource is consistent with one of the access rights , 

retrieving from the management table first access right information 
of the registered computer resource and second access right information of the second 
computer resource, and 

determining whether the registered process has an access right for 
outputting is allowed to access the registered first computer resource to the second 
computer resource by checking the first access right information and the second access 
right information retrieved from the management table based on the examination result ; 

a processing step of, if it is determined in the determination step that the 
registered process has the access right of both is allowed to access the first and the second 
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access right information computer resource , transferring the operation access request to the 
operating system and returning a result from the operating system to the registered process; 
and 

a denial step of denying the operation access request, if it is determined in 
the determination step that the registered process lacks either the access right of is not 
allowed to access the first access right information or the access right of the second access 
right information computer resource . 

2. (cancelled). 

3. (previously presented): The method according to claim 1, wherein 
the access right information designates an access right that is extended but not defined in 
an existing environment. 

4. and 5. (cancelled). 

6. (previously presented): The method according to claim 3, wherein 
the access right information contains information that designates at least one of a right to 
move to another medium, a right to copy to another medium, a right to print, a right to 
write to a shared memory, a right to capture a screen, and a right to restrict use processes. 
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7. (previously presented): The method according to claim 1, wherein 
in the denial step, an access denial error message is returned to the process without any 
access to the requested computer resource. 



8. (previously presented): The method according to claim 1, wherein 
in the denial step, a successful access message is returned to the process without any access 
to the requested computer resource. 

9. (currently amended): The method according to claim 1, wherein in 
the denial step, the operation access request is converted into an operation access request 
for a dummy computer resource and transferred to the operating system, and a result from 
the operating system is returned to the process. 

10. (currently amended): An information processing apparatus for 
controlling access to computer storage, display, recording and other resource|T(s)lls 
managed by an operating system in a computer, the information processing apparatus being 
comprising hardware controlled by a specific resource management program located 
between the operating system and an application, the apparatus comprising: 

a management table stored in a storage medium, wherein the management 
table provides, for each computer resource managed by the operating system, access right 
information representing comprising access rights for outputting each computer resource to 
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another computer resource , each represented by a series of basic operations for accessing 
computer resources, and conditions under which the access right is rights are validated; 

interception means for intercepting an operation access request for a first 
computer resource from a process before the operation access request is transferred to the 
operating system , and if ; 

monitoring means for monitoring all the basic operations for accessing 
computer resources; 

registration means for, when the process heMs -secures access to the first 
computer resource, f-er-registering a correspondence between the process and the first 
computer resource in a storage medium resulting in a registered process and a registered 
computer resource ; 

cancellation means for, when the process releases the first computer 
resource, cancelling the correspondence between the process and the first computer 
resource; 

determination means for: 

retrieving access right information of the first computer resource 
from the management table; 

monitoring examining the monitoring result to see whether there is a 
series of basic operations requests associated with the registered process and the registered 
first computer resource to recognize when the series of operation requests, which, when 
considered together, has the effect of outputting the registered computer resource to a 
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second computer resource, the determination being made by: is consistent with one of the 
access rights, 

retrieving from the management table first access right information 
of the registered computer resource and second access right information of the second 
computer resource, and 

determining whether the registered process has an access right for 
outputting the registered is allowed to access the first computer resource to the second 
computer resource by checking the first access right information and the second access 
right information retrieved from the management table based on the examination result ; 

processing means for, if it is determined by the determination means that the 
registered process has the access right is allowed to access the first computer resource , 
transferring the operation access request to the operating system and returning a result from 
the operating system to the registered process; and 

denial means for denying the operation access request if it is determined by 
the determination means that the registered process lacks either the access right of the first 
access right is not allowed to access the first computer resource . 

11. (cancelled). 
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12. (previously presented): The apparatus according to claim 10, 
wherein the access right information designates an access right that is extended but not 
defined in an existing environment. 

13. and 14. (cancelled). 

15. (previously presented): The apparatus according to claim 12, 
wherein the access right information contains information that designates at least one of a 
right to move to another medium, a right to copy to another medium, a right to print, a right 
to write to a shared memory, a right to capture a screen, and a right to restrict use 
processes. 

16. (previously presented): The apparatus according to claim 10, 
wherein the denial means returns an access denial error message to the process without any 
access to the requested computer resource. 

17. (previously presented): The apparatus according to claim 10, 
wherein the denial means returns a successful access message to the process without any 
access to the requested computer resource. 
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18. (currently amended): The apparatus according to claim 10, wherein 
the denial means converts the operation access request into an operation access request for 
a dummy computer resource, transfers the operation access request to the operating system, 
and returns a result from the operating system to the process. 

19. (currently amended): A storage medium which stores a_program 
code for causing a computer to control[[ling]] access to computer storage, display, 
recording and other resource|T(s)lls managed by an operating system in a computer, 
wherein the program code wherein said program implements a specific resource 
management program method and is located between the operating system and an 
application, the program code said method comprising: 

program code of a storing step of storing a management table in a storage 
medium, wherein the management table provides, for each computer resource managed by 
the operating system, access right information representing comprising access rights fer- 
outputting each computer resource to another computer resource , each represented by a 
series of basic operations for accessing computer resources, and conditions under which the 
access right is rights are validated; 

program code of an interception step of intercepting an operation access 
request for a first computer resource from a process, before the operation access request is 
transferred to the operating system , and if ^ 
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a monitoring step of monitoring all the basic operations for accessing 
computer resources; 

a registration step of, when the process heMs -secures access to the first 
computer resource, registering a correspondence between the process and the first 
computer resource in a storage medium resulting in a registered process and a registered 
computer resource ; 

a cancellation step of, when the process releases the first computer resource, 
cancelling the correspondence between the process and the first computer resource; 
program code of a determination step of: 

retrieving access right information of the first computer resource 
from the management table; 

monitoring examining the monitoring result to see whether there is a 
series of basic operations requests associated with the registered process and the registered 
first computer resource to recognize when the series of operation requests, which, when 
considered together, has the effect of outputting the registered computer resource to a 
second computer resource, is consistent with one of the access rights, 

retrieving from the management table first access right information 
of the registered computer resource and second access right information of the second 
computer resource , and 

determining whether the registered process has an access right for 
outputting the registered is allowed to access the first computer resource to the second 
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computer resource by checking the first access right information and the second access 
right information retrieved from the management table based on the examination result ; 

program code of a processing step of, if it is determined in the determination 
step that the registered process has the access right of both is allowed to access the first and 
the second access right information computer resource , transferring the operation access 
request to the operating system and returning a result from the operating system to the 
registered process; and 

program code of a denial step of denying the operation access request, if it is 
determined in the determination step that the registered process lacks either the access right 
ef- is not allowed to access the first access right information or the access right of the 
second access right information computer resource . 

20. (cancelled). 

21. (previously presented): The medium according to claim 19, wherein 
in the determination step, it is determined whether the access right is present by looking up 
an access right management table containing resource designation information that 
designates a specific computer resource, condition information under which the access 
right is validated, and access right information that designates an access right that is 
extended but not defined in an existing environment. 
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22. and 23. (cancelled). 



24. (previously presented): The medium according to claim 21, wherein 
the access right information contains information that designates at least one of a right to 
move to another medium, a right to copy to another medium, a right to print, a right to 
write to a shared memory, a right to capture a screen, and a right to restrict use processes. 

25. (previously presented): The medium according to claim 19, wherein 
in the denial step, an access denial error message is returned to the process without any 
access to the requested computer resource. 

26. (previously presented): The medium according to claim 19, wherein 
in the denial step, a successful access message is returned to the process without any access 
to the requested computer resource. 

27. (currently amended): The medium according to claim 19, wherein in 
the denial step, the operation access request is converted into an operation access request 
for a dummy computer resource and transferred to the operating system, and a result from 
the operating system is returned to the process. 

28. and 29. (cancelled) 
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30. (previously presented): The medium according to claim 19, wherein 
if it is determined in the determination step that no access right is present, and access is 
denied in the denial step, an access right is permitted by inputting charging information. 

31. (previously presented): The medium according to claim 19, wherein 
the computer resource includes contents of a Web cast, digital broadcasting, and music 
distribution. 

32. (currently amended): An information processing system constituted 
by connecting comprising first and second terminals connected through a communication 
network, the first and the second terminals being controlled by a specific resource 
management program located between an operating system , which manages computer 
storage, display, recording and other resources, and an application for each terminal, 
wherein 

the first terminal comprises: 

interception means for intercepting an operation access request for a first 
computer resource of the second terminal from a process in the first terminal, before the 
computer resource of the second terminal is accessed via an operating system of the first 
terminal , and if 
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monitoring means for monitoring all the basic operations for accessing 
computer resources; 

registration means for, when the process heMs -secures access to the first 
computer resource, registering a correspondence between the process and the first 
computer resource in a storage medium resulting in a registered process and a registered 
computer resource, 

cancellation means for, when the process releases the first computer 
resource, cancelling the correspondence between the process and the first computer 
resource; and 

transmitting means for transmitting the operation access request intercepted 
by the interception means to the second terminal; and 
the second terminal comprises: 

storing means for storing a management table in a storage medium, wherein 
the management table provides, for each computer resource managed by the operating 
system of the second terminal, access right information representing comprising access 
rights for outputting each computer resource to another computer resource , each 
represented by a series of basic operations for accessing computer resources, and 
conditions under which the access right is rights are validated; 

receiving means for receiving the operation access request intercepted by 
the interception means of the first terminal; 

determination means for: 
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retrieving access right information of the first computer resource 
from the management table; 

monitoring examining the monitoring result to see whether there is a 
series of basic operations requests associated with the registered process and the registered 
first- computer resource to recognize when the series of operation requests, which, when 
considered together, has the effect of outputting the registered computer resource to a 
second computer resource, is consistent with one of the access rights, 

retrieving from the management table first access right information 
of the registered computer resource and second access right information of the second 
computer resource, and 

determining whether the registered process has an access right for 
outputting the registered is allowed to access the first computer resource to the second 
computer resource by checking the access right information and the second access right 
information retrieved from the management table based on the examination result ; 

processing means for, if it is determined by the determination means that the 
registered process has the access right of both is allowed to access the first and the second 
access right information computer resource , transferring the operation access request to the 
operating system in the first terminal and returning a result from the operating system to 
the registered process in the first terminal; and 

denial means for denying the operation access request if it is determined by 
the determination means that the registered process lacks either the access right of is not 
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allowed to access the first access right information or the access right of the second access 
right information computer resource . 



33. (currently amended): A control method for an information 
processing system constituted by connecting first and second terminals through a 
communication network, the first and the second terminals being controlled by a specific 
resource management program located between an operating system , which manages 
computer storage, display, recording and other resources, and an application for each 
terminal, the method comprising: 

a storing step of storing a management table in a storage medium, wherein 
the management table provides, for each computer resource managed by an operating 
system of the second terminal, access right information representing comprising access 
rights for outputting each computer resource to another computer resource , each 
represented by a series of basic operations for accessing computer resources, and 
conditions under which the access right is rights are validated; 

an interception step of intercepting an operation access request for a first 
computer resource of the second terminal from a process in the first terminal, before the 
computer resource of the second terminal is accessed via an operating system of the first 
terminal , and if 

a monitoring step of monitoring all the basic operations for accessing 
computer resources; 
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a registration step of, when the process heMs -secures access to the first 
computer resource, registering a correspondence between the process and the first 
computer resource in a storage medium resulting in a registered process and a registered 
computer resource ; 

a cancellation step of, when the process releases the first computer resource, 
cancelling the correspondence between the process and the first computer resource; 
a determination step of: 

retrieving access right information of the first computer resource 
from the management table; 

monitoring examining the monitoring result to see whether there is a 
series of basic operations requests associated with the registered process and the registered 
first computer resource to recognize when the series of operation requests, which, when 
considered togethe r, has the effect of outputting the registered computer resource to a 
second computer resource, is consistent with one of the access rights, 

retrieving from the management table first access right information 
of the registered computer resource and second access right information of the second 
computer resource, and 

determining whether the registered process has an access right for 
outputting the registered is allowed to access the first computer resource to the second 
computer resource by checking the first access right information and the second access 
right information retrieved from the management table based on the examination result ; 
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a processing step of, if it is determined in the determination step that the 
registered process has the access right of both is allowed to access the first and the second 
access right information, computer resource, transferring the operation access request to the 
operating system in the first terminal and returning a result from the operating system to 
the registered process in the first terminal; and 

a denial step of denying the operation access request if it is determined in 
the determination step that the registered process lacks either the access right of is not 
allowed access to the first access right information or the access right of the second access 
right information computer resource . 

34. (currently amended): A storage medium which stores a_program 
codes of control for causing a computer to control an information processing system 
constituted by connecting first and second terminals through a communication network,-the 
first and the second terminals being controlled by a specific wherein said program 
implements a resource management program method and is located between an operating 
system , which manages computer storage, display, recording and other resources, and an 
application for each terminal, said method comprising: 

program code of a storing step of storing a management table in a storage 
medium, wherein the management table provides, for each computer resource managed by 
an operating system of the second terminal, access right information representing 
comprising access rights for outputting each computer resource to another computer 
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resource , each represented by a series of basic operations for accessing computer resources, 
and conditions under which the access right is rights are validated; 

program code of an interception step of intercepting an operation access 
request for a first computer resource of the second terminal from a process in the first 
terminal, before the computer resource of the second terminal is accessed via an operating 
system of the first terminal , and if ; 

a monitoring step of monitoring all the basic operations for accessing 
computer resources; 

a registration step of, when the process heMs -secures access to the first 
computer resource, registering a correspondence between the process and the first 
computer resource in a storage medium resulting in a registered process and a registered 
computer resource ; 

a cancellation step of, when the process releases the first computer resource, 
cancelling the correspondence between the process and the first computer resource; 

program code of a determination step of: 

retrieving access right information of the first computer resource 
from the management table; 

monitoring examining the monitoring result to see whether there is a 
series of operations requests associated with the registered process and the registered first 
computer resource to recognize when the series of operation requests, which, when 
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considered together, has the effect of outputting the registered computer resource to a 
second computer resource is consistent with one of the access rights , 

retrieving from the management table first access right information 
of the registered computer resource and second access right information of the second 
computer resource, and 

determining whether the registered process has an access right for 
outputting the registered is allowed to access the first computer resource to the second 
computer resource by checking the first access right information and the second access 
right information retrieved from the management table based on the examination result ; 

program code of a processing step of, if it is determined in the determination 
step that the registered process has the access right of both is allowed to access the first and 
the second access right information computer resource , transferring the operation access 
request to the operating system in the first terminal and returning a result from the 
operating system to the registered process in the first terminal; and 

program code of a denial step of denying the operation request if it is 
determined in the determination step that the registered process lacks either the access right 
ef- is not allowed to access the first access right information or the access right of the 
second access right information computer resource . 

35. (cancelled). 
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36. (currently amended): An information processing apparatus 
connected to a terminal through a communication network, the information processing 
apparatus and the terminal being controlled by a specific resource management program 
located between an operating system , which manages computer storage, display, recording 
and other resources, and an application for each of the information processing apparatus 
and the terminal, the apparatus comprising: 

a memory; 

a management table stored in the memory, providing, for each computer 
resource managed by the operating system of the terminal, access right information 
comprising access rights, each represented by a series of basic operations for accessing 
computer resources, and conditions under which the access rights are validated; 

interception means for intercepting an operation access request for a first 
computer resource of the terminal from a process, before the computer resource of the 
terminal is accessed via an operating system of the information processing apparatus^-and 

if: 

monitoring means for monitoring all the basic operations for accessing 
computer resources; 

registration means for, when the process heMs -secures access to the first 
computer resource, for registering a correspondence between the process and the first 
computer resource in a storage medium resulting in a registered process and a registered 
computer resource the memory ; 
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cancellation means for, when the process releases the first computer 
resource, cancelling the correspondence between the process and the first computer 
resource; 

transmitting means for transmitting the operation access request intercepted 
by the interception means to the terminal; and 

receiving means for receiving a reply to the operation access request from 

the terminal, 

wherein the terminal: 

retrieves access right information of the computer resource from the 
first management table; 

monitors examines the monitoring result to see whether there is a 
series of basic operations requests associated with the registered process and the registered 
first- computer resource to recognize when the series of operation requests, which, when 
considered together, has the effect of outputting the registered computer resource of the 
terminal to a second computer resource is consistent with one of the access rights , 

retrieves from a management table first access right information of 
the registered computer resource and second access right information of the second 
computer resource, and 

determines whether the registered process has an access right for 
outputting the registered is allowed to access the first computer resource to the second 
computer resource by checking the first access right information and the second access 
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right information retrieved from the management table based on the examination result , 
wherein the management table provides, for each computer resource managed by the 
operating system of the terminal, access right information representing access rights for 
outputting each computer resource to another computer resource, and conditions under 
which the access right is validated, 

wherein the receiving means receives a determination result determined by 
the terminal as the reply. 

37. (currently amended): An information processing apparatus 
connected to a terminal through a communication network, the information processing 
apparatus comprising hardware, and the information processing apparatus and the terminal 
being controlled by a specific resource management program located between an operating 
system , which manages computer storage, display, recording and other resources, and an 
application for each of the information processing apparatus and the terminal, the apparatus 
comprising: 

storing means for storing a management table in a storage medium, wherein 
the management table provides, for each computer resource managed by an operating 
system of the information processing apparatus, access right information representing 
comprising access rights for outputting each computer resource to another computer 
resource , each represented by a series of basic operations for accessing computer resources, 
and conditions under which the access right is rights are validated; 
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receiving means for receiving an operation access request for a first 
computer resource of the information processing apparatus from a process of the terminal, 
intercepted by the terminal, before the first computer resource of the information 
processing apparatus is accessed via an operating system of the information processing 
apparatus , and if ^ 

monitoring means for monitoring all the basic operations for accessing 
computer resources; 

registration means for, when the process heMs -secures access to the first 
computer resource, registering a correspondence between the process and the first 
computer resource in a storage medium resulting in a registered process and a registered 
computer resource ; 

cancellation means for, when the process releases the first computer 
resource, cancelling the correspondence between the process and the first computer 
resource; 

determination means for: 

retrieving access right information of the first computer resource 
from the management table, 

monitoring examining the monitoring result to see whether there is a 
series of basic operations requests associated with the registered process and the registered 
first- computer resource to recognize when the series of operation requests, which, when 
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considered together, has the effect of outputting the registered computer resource to a 
second computer resource, is consistent with one of the access rights, 

retrieving from the management table first access right information 
of the registered computer resource and second access right information of the second 
computer resource, and 

determining whether the registered process has an access right for 
outputting the registered is allowed to access the first computer resource to the second 
computer resource by checking the first access right information and the second access 
right information retrieved from the management table based on the examination result ; 

processing means for, if it is determined by the determination means that the 
registered process has the access right of both is allowed to access the first and the second 
access right information computer resource , transferring the operation access request to the 
operating system in the terminal and returning a result to a process in the terminal; and 

denial means for denying the operation access request if it is determined by 
the determination means that the registered process lacks either the access right of is not 
allowed to access the first access right information or the access right of the second access 
right information computer resource . 

38. (currently amended): An information processing method for an 
information processing apparatus connected to a terminal through a communication 
network, the information processing apparatus and the terminal being controlled by a 
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specific resource management program located between an operating system , which 
manages computer storage, display, recording and other resources, and an application for 
each of the information processing apparatus and the terminal, the method comprising: 

a storing step of storing a management table in a storage medium, wherein 
the management table provides, for each computer resource managed by the operating 
system of the terminal, access right information comprising access rights, each represented 
by a series of basic operations for accessing computer resources, and conditions under 
which the access rights are validated; 

an interception step of intercepting an operation request for a first computer 
resource of the terminal from a process, before the computer resource of the terminal is 
accessed via an operating system of the information processing apparatus , and if ; 

a monitoring step of monitoring all the basic operations for accessing 
computer resources; 

a registration step of, when the process heMs -secures access to the first 
computer resource, registering a correspondence between the process and the first 
computer resource in a storage medium resulting in a registered process and a registered 
computer resource, and 

a cancellation step of, when the process releases the first computer resource, 
cancelling the correspondence between the process and the first computer resource; 

a transmitting step of transmitting the operation access request intercepted 
in the interception step to the terminal; 



-26- 



a receiving step of receiving a reply to the operation access request from the 



terminal, 

wherein the terminal: 

retrieves access right information of the first computer resource from 

the management table, 

monitors examines the monitoring result to see whether there is a 
series of basic operations requests associated with the registered process and the registered 
first computer resource to recognize when the series of operation requests, which, when 
considered together, has the effect of outputting the registered computer resource of the 
terminal to a second computer resource is consistent with one of the access rights , 

retrieves from a management table first access right information of 
the registered computer resource and second access right information of the second 
computer resource, and 

determines whether the registered process has an access right for 
outputting the registered is allowed to access the first computer resource to the second 
computer resource by checking the first access right information and the second access 
right information retrieved from the management table based on the examination result , 
wherein the management table provides, for each computer resource managed by the 
operating system of the terminal, access right information representing access rights for 
outputting each computer resource to another computer resource, and conditions under 
which the access right is validated, 
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wherein in the receiving step, a determination result determined by the 
terminal is received as the reply. 

39. (currently amended): An information processing method for an 
information processing apparatus connected to a terminal through a communication 
network, the information processing apparatus and the terminal being controlled by a 
specific resource management program located between an operating system , which 
manages computer storage, display, recording and other resources, and an application for 
each of the information processing apparatus and the terminal, the method comprising: 

a storing step of storing a management table in a storage medium, wherein 
the management table provides, for each computer resource managed by an operating 
system of the information processing apparatus, access right information representing 
comprising access rights for outputting each computer resource to another computer 
resource , each represented by a series of basic operations for accessing computer resources, 
and conditions under which the access right is rights are validated; 

a receiving step of receiving an operation access request for a first computer 
resource of the information processing apparatus from a process of the terminal, 
intercepted by the terminal, before the computer resource of the information processing 
apparatus is accessed via an operating system of the information processing apparatus^-and 

if-; 
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a monitoring step of monitoring all the basic operations for access computer 

resources; 

a registration step of, when the process heMs -secures access to the first 
computer resource, registering a correspondence between the process and the first 
computer resource in a storage medium resulting in a registered process and a registered 
computer resource ; 

a cancellation step of, when the process releases the first computer resource, 
cancelling the correspondence between the process and the first computer resource; 
a determination step of: 

retrieving access right information of the first computer resource 
from the management table; 

monitoring examining the monitoring result to see whether there is a 
series of basic operations requests associated with the registered process and the registered 
first- computer resource to recognize when the series of operation requests, which, when 
considered together, has the effect of outputting the registered computer resource to a 
second computer resource is consistent with one of the access rights , 

retrieving from the management table first access right information 
of the registered computer resource and second access right information of the second 
computer resource, and 

determining whether the registered process has an access right for 
outputting the registered is allowed to access the first computer resource to the second 
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computer resource by checking the first access right information and the second access 
right information retrieved from the management table based on the examination result ; 

a processing step of, if it is determined in the determination step that the 
registered process has the access right of both is allowed to access the first and the second 
access right information computer resource , transferring the operation access request to the 
operating system in the terminal and returning a result to a process in the terminal; and 

a denial step of denying the operation request if it is determined in the 
determination step that the registered process lacks either the access right of is not allowed 
to access the first access right information or the access right of the second access right 
information computer resource . 

40. (currently amended): A storage medium which stores a_program 
codes of information processing of for controlling an information processing apparatus 
connected to a terminal through a communication network, wherein the information 
processing apparatus and the terminal are controlled by a specific said program implements 
a resource management program method and is located between an operating system., 
which manages computer storage, display, recording and other resources, and an 
application for each the information processing apparatus and the terminal, the program 
codes said method comprising: 

a storing step of storing a management table in a storage medium, wherein 
the management table provides, for each computer resource managed by the operating 
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system of the terminal, access right information comprising access rights, each represented 
by a series of basic operations for accessing computer resources, and conditions under 
which the access rights are validated; 

program code of an interception step of intercepting an operation access 
request for a first computer resource of the terminal from a process, before the computer 
resource of the terminal is accessed via an operating system of the information processing 
apparatus , and if ^ 

a monitoring step of monitoring all the basic operations for accessing 
computer resources; 

a registration step of, when the process heMs -secures access to the first 
computer resource, registering a correspondence between the process and the first 
computer resource in a storage medium resulting in a registered process and a registered 
computer resource ; 

a cancellation step of, when the process releases the first computer resource, 
cancelling the correspondence between the process and the first computer resource; 

program code of a transmitting step of transmitting the operation access 
request intercepted in the interception step to the terminal; 

program code of a receiving step of receiving a reply to the operation access 
request from the terminal, 

wherein the terminal: 
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retrieves access right information of the first computer resource from 

the management table; 

monitors examines the monitoring result to see whether there is a 
series of basic operations requests associated with the registered process and the registered 
first- computer resource to recognize when the series of operation requests, which, when 
considered together, has the effect of outputting the registered computer resource of the 
terminal to a second computer resource is consistent with one of the access rights , 

retrieves from a management table first access right information of 
the registered computer resource and second access right information of the second 
computer resource, and 

determines whether the registered process has an access right for 
outputting the registered is allowed to access the first computer resource to the second 
computer resource by checking the first access right information and the second access 
right information retrieved from the management table based on the examination result T 
wherein the management table provides, for each computer resource managed by the 
operating system of the terminal, access right information representing access rights for 
outputting each computer resource to another computer resource, and conditions under 
which the access right is validated , 

wherein in the receiving step, a determination result determined by the 
terminal is received as the reply. 
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41. (currently amended): A storage medium which stores a_pro gram 
codes of information processing of for controlling an information processing apparatus 
connected to a terminal through a communication network, the information processing 
apparatus and the terminal being controlled by a specific said program implements a 
resource management program method and is located between an operating system , which 
manages compotuer storage, display, recording and other resources, and an application for 
each of the information processing apparatus and the terminal, the program codes said 
method comprising: 

program code of a storing step of storing a management table in a storage 
medium, wherein the management table provides, for each computer resource managed by 
an operating system of the information processing apparatus, access right information 
representing comprising access rights for outputting each computer resource to another 
computer resource , each represented by a series of basic operations for accessing computer 
resources, and conditions under which the access right is rights are validated; 

program code of a receiving step of receiving an operation access request 
for a first computer resource of the information processing apparatus from a process of the 
terminal, intercepted by the terminal, before the computer resource of the information 
processing apparatus is accessed via an operating system of the information processing 
apparatus , and if ^ 

a monitoring step of monitoring all the basic operations for accessing 
computer resources; 
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a registration step of, when the process heMs -secures access to the first 
computer resource, registering a correspondence between the process and the first 
computer resource in a storage medium resulting in a registered process and a registered 
computer resource ; 

a cancellation step of, when the process releases the first computer 
resources, cancelling the correspondence between the process and the first computer 
resource; 

program code of a determination step of: 

retrieving access right information of the first computer resource 
from the management table; 

monitoring examining the monitoring result to see whether there is a 
series of basic operations requests associated with the registered process and the registered 
first- computer resource to recognize when the series of operation requests, which, when 
considered together, has the effect of outputting the registered computer resource to a 
second computer resource is consistent with one of the access rights , 

retrieving from the management table first access right information 
of the registered computer resource and second access right information of the second 
computer resource, and 

determining whether the registered process has an access right for 
outputting the registered is allowed to access the first computer resource to the second 
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computer resource by checking the first access right information and the second access 
right information retrieved from the management table based on the examination result ; 

program code of a processing step of, if it is determined in the determination 
step that the registered process has the access right of both is allowed to access the first-and 
the second access right information computer resource , transferring the operation access 
request to the operating system in the terminal and returning a result to a process in the 
terminal; and 

program code of a denial step of denying the operation request if it is 
determined in the determination step that the registered process lacks either the access right 
ef- is not allowed to access the first access right information or the access right of the 
second access right information computer resource . 

42.-56. (cancelled). 

57. (currently amended): The method according to claim 1, wherein the 
interception step further comprises intercepting an operation access request from the 
operating system before access to a computer resource. 

58. (currently amended): The apparatus according to claim 10, wherein 
the interception means further comprises intercepting an operation access request from the 
operating system before access to a computer resource. 
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59. (currently amended): The medium according to claim 19, wherein 
the interception step further comprises intercepting an operation access request from the 
operating system before access to a computer resource. 

60. (cancelled). 
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